
$ rpki-client -vvf rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
File: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft (raw, json)
Hash identifier: R4mbvNaO7N2W3tBsMaa54KOyqRdQdpwcS9oK9Sjvmhw=
Subject key identifier: 7E:EC:88:C7:09:90:34:B7:2F:73:9B:19:2D:C5:1E:C1:63:31:C4:12
Authority key identifier: 70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9
Certificate issuer: /CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9
Certificate serial: 201A4ACF7C888E7BE5FB660DFEC9CAB63D3A9C35
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:51:34 +0000
Manifest this update: Tue 12 May 2026 16:46:34 +0000
Manifest next update: Wed 13 May 2026 17:02:34 +0000
Files and hashes: 1: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: B2JBhxZBgB0va+fccB3dL51mK3TG1i5CCqVPp24i9Qw=)
2: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl (hash: /T4zymMX5tSyR+dPYnNMvH152GrklXr/5IT7zy7BowI=)
3: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: 4bKBlVxqedWSCh5v8weNHekAQ9GKb4xy7LR81Mjy5FE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl
rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1a:4a:cf:7c:88:8e:7b:e5:fb:66:0d:fe:c9:ca:b6:3d:3a:9c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9
Validity
Not Before: May 12 16:46:34 2026 GMT
Not After : May 13 17:02:34 2026 GMT
Subject: CN=7EEC88C7099034B72F739B192DC51EC16331C412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:57:29:81:70:00:be:77:da:e6:81:1a:5d:15:
6e:ee:f1:d6:4f:b6:51:8d:e0:39:ad:f2:4e:8a:bd:
91:8e:a7:87:66:d9:25:5c:ee:c4:b4:8a:77:4a:13:
56:8d:c0:4e:e3:07:78:cf:71:2a:69:3a:29:a5:09:
63:2c:f7:4d:ed:ac:bd:37:06:cb:ff:93:f9:1c:0e:
f8:64:92:4b:79:83:c9:0e:48:9f:09:d2:b5:d9:1e:
22:ab:af:bf:9b:37:fc:a1:24:41:24:7d:6a:bb:25:
f8:a6:07:aa:2f:0c:c4:4d:3d:ae:3a:1b:cc:92:c5:
0d:15:f5:b1:12:2d:f5:81:46:12:d7:43:93:ce:56:
3d:ba:54:04:1b:f6:52:c5:30:05:35:4a:3a:bd:bb:
8e:08:6e:9a:de:45:87:6d:4a:c3:0c:4b:cd:c6:8b:
d2:b4:71:71:f6:67:9e:42:1f:22:66:cd:f5:a0:b6:
65:39:e6:22:72:c0:72:13:97:05:52:55:7b:35:fd:
d2:8e:31:a5:5e:10:00:14:4d:e4:32:c2:94:42:e3:
9f:99:17:13:9c:9c:dd:78:7e:82:99:61:81:62:ef:
89:78:11:50:fe:15:ff:2b:6d:8d:1d:6e:14:33:4b:
82:8d:76:40:cc:fa:f2:1d:34:57:0d:79:29:a0:1c:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EC:88:C7:09:90:34:B7:2F:73:9B:19:2D:C5:1E:C1:63:31:C4:12
X509v3 Authority Key Identifier:
keyid:70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6d:d0:05:ae:6d:72:2f:fb:d7:9a:5e:a7:14:1d:d5:8a:4b:
07:32:35:39:6f:08:ea:86:5a:5d:7e:6c:cf:1b:09:5b:24:17:
ff:f5:d3:3b:3f:14:61:37:03:40:60:4e:00:ed:6b:81:67:07:
50:7a:56:63:cf:5c:8b:55:3f:23:f0:97:71:76:0a:ac:fa:c6:
51:4d:94:f3:ff:3b:90:46:fd:81:63:5a:c8:3f:eb:7a:f6:61:
21:26:67:34:64:15:24:bd:67:cf:fe:ee:78:21:6f:df:a1:7f:
0a:90:e1:f0:dd:2d:81:bf:27:38:d4:7d:d2:73:10:d3:98:a4:
ff:24:cd:44:17:90:d5:7c:a2:eb:cc:1a:e6:1f:72:a3:89:bf:
be:8d:e6:b9:a8:eb:e7:96:77:c9:de:7e:37:88:48:fc:45:ed:
aa:61:cf:07:69:42:9e:10:7e:cc:7b:ef:e5:0a:34:5f:dc:cf:
9b:6f:1c:b8:85:39:c3:0c:c7:62:a5:4f:e0:49:02:59:39:d5:
c9:16:87:fe:ea:6c:e6:63:cf:c4:9a:40:52:8e:3b:e9:cf:f6:
b6:d0:53:40:b3:35:95:24:94:d9:22:03:b3:f9:72:cf:62:ee:
92:f4:e0:91:0b:a1:e6:b4:a6:5f:f2:ca:11:27:66:a3:ca:c1:
b6:39:b8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:27 2026 by rpki-client